verified.assetscience.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e1:f0:f3:65:9d:5b:21:9e:0a:be:9b:6d:8f:f0:c6:31 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=verified.assetscience.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e1:f0:f3:65:9d:5b:21:9e:0a:be:9b:6d:8f:f0:c6:31
Serial Number (int): 300327386973931848875804856282004899377
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 63:b4:57:1d:8d:b4:5e:77:a8:17:5f:ed:d1:18:fe:00:3e:fa:ed:58
Fingerprint (sha256): 4b:36:35:77:60:cc:83:2e:cc:6a:12:92:79:71:c4:9f:cf:99:38:91:a1:f3:d8:f4:7d:73:f3:9b:3e:87:ae:74

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/aL8W-wMaGBU
CRL Distribution Point: http://crls.pki.goog/gts1d4/ILeTvgh4sVk.crl

Check the revocation status for certificate verified.assetscience.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for verified.assetscience.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

verified.assetscience.com
uni.appsalar.co
bfluency.com
connect.qa.wunderkind.co
www.hyeji.dev
www.webdyno.app
valeriap.dev
app.zentility.com
lumnia.rentokil-initial.com
login.okularid.com
humane-it.com
www.paytus.co
nagen.dev
lakshmi.dev
www.peerly.dev
templates.drillmaps.com
hutupia.com
benjmann.net
jayce.life
dessertnus.vyannjan.com
kurse.blackroll.fit
toracodes.com
www.viewkitstudio.com
portal.staging.budgens.ubamarket.com
madridnuevopoceros.es
calathea.supplyhive.dev
alexis-soto.dev
ludee.com.br
cms.marbles.tibles.com
app.marbles.tibles.com
vitokatim.online
www.etoileliaison.com
lostandfoundconcierge.com
www.rld.my.id
www.nes-electricite.fr
ff.fitnesspoker.se
jsfordesigners.davemart.in
reevr.eu
alubofplus.com
care4health.com.lb
login.emotium.fr
www.fabriusa.com
skykraft.io
next.wejewel.ai
digiturn.app
eldrx.com
teamkece.com
app.infakt.lt
mycone.jp
catalfotechnologies.com
plataforma.rastrotec.com.br
a.giu.es
aviato.consulting
boonyongyang.com
reacstagram.com
asuunwellness.in
blog.coitelada.com
birthdaydecorator.in
gferrami.com
www.expeditepassportservice.com
www.primepitchdisplay.com
churchapp.live
admin.mooklab-dev.link
www.ibakurov.com
www.maltaquadtours.com
track.mikejam.es
www.streamwrk.com
thedailygainapp.com
bildeler.net
www.coronahaiti.org
mrndlab.com
app.uniobrainwavemusic.com
cp17.rezidnet.com
vertigofilms.fr
my.leeeds.de
www.facegroups.org
www.trafficinfuser.com
www.xbiologix.com
valeplus.biz
mkp.kioscodeseguros.com
dl.latweb.au
www.dictation.io
wordmaker.app
lien.cl
no9.mytc.work
website1197.estore.business
api.daedalusfi.com
app.yoursbank.com.br
www.valeplus.biz
www.preptaxcorp.ca
points4kids.life
www.bearsssm.ca
www.cocktaillog.com
alpha-capital.co
verify.akocarsapp.com
anarosadesigns.com
bollywoodatmac.com
bnq-cert.marxent.cloud
alanjsfleming.com
beta.bestinvoicing.com

Other certificates including the domain name assetscience.com

(limited to 100 certificates)
ssl381421.cloudflaressl.com
ssl381420.cloudflaressl.com
wiki.assetscience.com
sni.cloudflaressl.com
ssl381419.cloudflaressl.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
jira.assetscience.com
ssl381421.cloudflaressl.com
ssl381420.cloudflaressl.com
ssl381419.cloudflaressl.com
assetscience.com
ssl381420.cloudflaressl.com
jira.assetscience.com
ssl381420.cloudflaressl.com
go.assetscience.com
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
go.assetscience.com
ssl381421.cloudflaressl.com
releaselines.assetscience.com
ssl381421.cloudflaressl.com
assetscience.com
ssl381421.cloudflaressl.com
assetscience.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381419.cloudflaressl.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
rydpay-map.thinxcloud-staging.de
go.assetscience.com
assetscience.com
www.thefold.app
ssl381421.cloudflaressl.com
distributions.assetscience.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381419.cloudflaressl.com
ssl381421.cloudflaressl.com
assetscience.com
ssl381421.cloudflaressl.com
*.assetscience.com
demologin.okularid.com
config.assetscience.com
ssl381420.cloudflaressl.com
www.genesisbell.com
ssl381419.cloudflaressl.com
ssl381419.cloudflaressl.com
ssl381421.cloudflaressl.com
www.assetscience.com
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381420.cloudflaressl.com
config.assetscience.com
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
assetscience.com
wiki.assetscience.com
ssl381421.cloudflaressl.com
ssl381419.cloudflaressl.com
*.assetscience.com
ssl381419.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381420.cloudflaressl.com
plantitas.app
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
assetscience.com
assetscience.com
ssl381419.cloudflaressl.com
sni.cloudflaressl.com
ssl381419.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381419.cloudflaressl.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
www.cipinglesfacil.com
ssl381421.cloudflaressl.com
wiki.assetscience.com
ssl381421.cloudflaressl.com
app.prizminsurance.io
www.assetscience.com
ssl381420.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
ssl381420.cloudflaressl.com
*.assetscience.com
support.assetscience.com
ssl381421.cloudflaressl.com
ssl381421.cloudflaressl.com
verified.assetscience.com
ssl381421.cloudflaressl.com
wiki.assetscience.com

Certificate

The complete raw certificate details for verified.assetscience.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300327386973931848875804856282004899377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 08:33:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 09:31:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'verified.assetscience.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/aL8W-wMaGBU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1921 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verified.assetscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.appsalar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfluency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.qa.wunderkind.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyeji.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdyno.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valeriap.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zentility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumnia.rentokil-initial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.okularid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humane-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paytus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagen.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakshmi.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peerly.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templates.drillmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutupia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjmann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jayce.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dessertnus.vyannjan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurse.blackroll.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toracodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewkitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.staging.budgens.ubamarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madridnuevopoceros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calathea.supplyhive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexis-soto.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ludee.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.marbles.tibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.marbles.tibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitokatim.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etoileliaison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostandfoundconcierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rld.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nes-electricite.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff.fitnesspoker.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsfordesigners.davemart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reevr.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alubofplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care4health.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.emotium.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabriusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skykraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.wejewel.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiturn.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamkece.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.infakt.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycone.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalfotechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plataforma.rastrotec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.giu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviato.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonyongyang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reacstagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asuunwellness.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.coitelada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthdaydecorator.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gferrami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expeditepassportservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primepitchdisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchapp.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mooklab-dev.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibakurov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltaquadtours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.mikejam.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streamwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedailygainapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bildeler.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coronahaiti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrndlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.uniobrainwavemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp17.rezidnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertigofilms.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.leeeds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facegroups.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trafficinfuser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbiologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valeplus.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkp.kioscodeseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.latweb.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dictation.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordmaker.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lien.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no9.mytc.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website1197.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.daedalusfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yoursbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valeplus.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preptaxcorp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points4kids.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearsssm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocktaillog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-capital.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.akocarsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anarosadesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bollywoodatmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnq-cert.marxent.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alanjsfleming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.bestinvoicing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/ILeTvgh4sVk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4dec63d50000040300473045022053a98fd0bf46125f74308fc2d432466e762c9626d3cadc38408cb86ae23c6e8a022100f373c7cbbb261629621dc8cbd0e5bbaacb8a3b56589ae7f0684ef757702b106e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4dec67e30000040300473045022100cd797b6cc7a6bf10fa904613d384ffac0a79ec8df8f8e0864a82f3b73b7f46ad022042fdb6cdb8f0b635a4bf0bffcdcd1aa3289324c3ab7181265d540b4ff50a234f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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